
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
File: B3vNZjsOY7316bgJr3Gu8eWt9js.mft (raw, json)
Hash identifier: CsK3ZPb95mISeTsQ3bPRwB6zWLA5mhj+/2YSyRWVXQ8=
Subject key identifier: DC:6D:BC:72:64:14:2B:D7:53:AD:34:C7:68:D2:7A:41:78:50:ED:52
Authority key identifier: 07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B
Certificate issuer: /CN=A9134309/serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
Certificate serial: CF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
Manifest number: C8
Signing time: Wed 17 Jun 2026 07:03:52 +0000
Manifest this update: Wed 17 Jun 2026 07:03:52 +0000
Manifest next update: Wed 24 Jun 2026 07:03:52 +0000
Files and hashes: 1: B3vNZjsOY7316bgJr3Gu8eWt9js.crl (hash: sZ+S4tZEVm2NiWzOEtxpQN5Y0+kiRqbRZX8vlMqXdhM=)
2: 13CC532280EC11F0A973810CC4F9AE02.roa (hash: jT3AFscqhG7wSNzs/99SgJiXp3bYTeq2OrH/bwn6TVk=)
3: 0322BF5A6D3411F0A208C05DC4F9AE02.roa (hash: ZcOaPyDXThtmtr1T0P1i7tbr9OkUJlJQMZQPJKMXF0Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl
rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207 (0xcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134309, serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
Validity
Not Before: Jun 17 07:03:52 2026 GMT
Not After : Jun 24 07:03:52 2026 GMT
Subject: CN=6a3246d8-f244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:23:46:e1:f2:8d:c1:b3:31:31:24:4d:ea:d2:
14:38:d6:40:77:55:58:b5:6a:4d:ac:e4:25:3a:ca:
88:36:09:4e:97:e8:34:b9:8d:15:2b:c3:e7:98:cc:
33:f6:03:1e:c3:e3:59:c1:73:26:f0:d0:a9:cc:7d:
61:cb:23:71:1a:59:d8:78:14:26:26:0c:f1:e1:1a:
66:6c:84:3a:44:8c:20:09:02:75:11:6e:bc:79:a7:
b9:4c:39:7d:fc:69:3f:8c:00:ca:06:8b:a9:ae:c7:
42:85:33:1c:dc:08:63:27:76:83:9f:c4:20:78:9e:
73:4a:0c:a4:7e:8a:56:98:b6:8d:9d:03:b5:4f:fa:
9d:08:92:40:9c:15:b3:75:fa:58:d5:da:0b:c0:8a:
00:0f:e1:c3:ec:13:39:8a:3a:7a:5b:7d:10:ab:be:
c1:de:d8:63:fd:7e:a5:9f:d5:ab:8c:2f:07:e0:61:
de:99:a5:01:8e:17:36:bc:ed:4c:69:8a:ec:55:94:
1f:67:75:1e:e1:b5:83:17:7d:a7:de:ea:56:44:8f:
98:43:e2:7b:fe:fd:7d:b6:22:1d:87:02:b1:0c:3e:
2b:0d:69:e8:94:54:71:64:6c:63:50:7a:34:20:3c:
5e:02:e5:97:d1:54:6d:08:f1:45:fb:a2:39:c4:9b:
23:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6D:BC:72:64:14:2B:D7:53:AD:34:C7:68:D2:7A:41:78:50:ED:52
X509v3 Authority Key Identifier:
keyid:07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:09:53:10:52:2a:fe:7c:c3:18:22:ad:2f:0b:4a:8b:fc:7f:
a1:a5:d9:cf:ab:fd:31:00:9a:36:ac:0d:8d:6d:f9:e6:c4:51:
0c:7b:34:7f:89:ad:05:6b:47:66:45:63:1a:91:43:a5:68:9b:
36:05:55:68:9d:51:0a:0d:0a:df:a4:85:a3:39:90:90:7b:35:
e7:b1:c4:5d:27:f2:27:83:24:4b:16:0f:78:39:db:29:f4:e7:
d4:6f:20:d1:af:7a:d6:dd:c8:ac:11:17:b6:b1:8e:b2:db:8b:
9f:b8:3f:6b:67:80:a2:df:5c:e8:6f:40:3c:cb:75:63:8b:2b:
92:90:9f:45:b2:3b:cb:16:97:59:fc:85:98:a0:c0:c8:ef:25:
52:61:c0:81:29:88:48:44:2b:eb:de:e5:fc:66:d3:4a:e8:0d:
29:2e:9c:e5:80:34:0e:da:a2:62:cc:e0:f7:6a:c3:9b:52:63:
55:e2:af:27:a4:5b:a6:44:47:df:b4:54:c1:70:38:63:4b:a5:
0a:8c:23:40:fb:de:91:33:2c:8a:81:6b:3b:07:7a:bf:f7:f6:
9a:fe:65:05:ea:be:f8:b3:e0:a8:69:61:2b:dc:b6:b9:c4:36:
cd:d6:0d:72:6c:d2:a7:9e:11:9f:98:56:13:f7:ef:95:6b:60:
86:93:15:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:01:24 2026 by rpki-client